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GF(p)±©n7c3tS£-^S^;©A9^-*ai (ij)(lSi, j^n), b| k(l^k^n) 

mmm2 %m&&&Bfr %&*iznz> mm^ftftMott nmft&GF ( P ) ±<nm 

fr#f©*f#/£#&mi 1, nU2 nUnfcU ffi^fT SGF(p) Jitf)^* UK 

.... UnttStS, 

1 1 i = n i (k¥= i) m i k mod p (i=U 2 n) 

£ 

t= n I k m i k mod p 
u=l/t mod p 

I i i = uX t i i mod p (i = l, 2, . . n) 
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[»#^3] ffir8B3HJ|C#Stt, ftflSU i(i=l, 2 n)& 

s J, l=m J. 1 X m J, 2 mod p 
s i 2=s 1 lXm i 3 mod p 



si (n-3)=si (n-4)Xm| (n-2) mod p 
t i n=s i (n-3) X m i (n-1) mod p 
t i (n-l)=sl (n-3)XmJ,n mod p 
s J, n=m | (n-1) X m i n mod p 
t i (n-2)=s i (n-4) Xs | n mod p 
s J. (n-l) =m | (n-2) X s | n mod p 
ti (n-3)=s| (n-5)Xs| (n-1) mod p 
si, (n-2)=mi (n-3)Xsi (n-1) mod p 
1 1 (n-4)=s i (n-6) X s i (n-2) mod p 



s I 5=m i 4X s i 6 mod p 
t i 3=s | 1 X s 1 5 mod p 
sJ,4=mi3Xsi5 mod p 
ti2=mJ.lXs!4 mod p 
til=mi2Xs!4 mod p 

t=tikXmik 

[ft#&4 ] ^«b^X. ^tlfe*PS^GF(p)©^^:^GF(q) (q=p T n){C£VAT, 
GF(q)(Z)^t;x§:AiJ^ I, x®GF(q)J:©^7C&ffi*-rS5e7CiSI3¥SlfliT?*oT, 
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C3S*^ 5 ] =?®>5-X e>*lfe^K#GF(p)<Z)jK^:#GF(q) (q=P T n) JCfcV^T, 
GF(q)tf)^t;x£A;fr£ U xtf)GF(q) JLO^jcS: sa*7G$RI¥Sff"T?«> o T, 

6 ] =?&>^X. &4xfc^KttGF(p)©fi£:*#GF(q) (q=P T n) 
GF(q)0)'7CX&A#fc ^ x©GF(q)±<0®7B&m*^*5a»^?R»$l*Tfa)oT v 
ISf3B7fix&A;*7i: U l&IB75x©3ffi7SS:#«>Sfe«)©3t5i*S^:S:^"r*^re 

ISflH*S^ff*aiJ©»&x©^^XiJirs^7C^t!l»t&«^, 

V ] ^#>#* &tife^PS#:GF(p) &3pJ»-r S^BS^JMHgp-^j/^T- 

iE©fiE»ni:GF(p)±©ii7c3*3i-^^rjg^©^C9^-*ai (ij)(l^i, j^n), 
fit*., 

[»#£8] ^^#x.e>tife^PSf*:GF(p)$:frjfflt-SWPS^iJMHt#^X^ 
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iE©»«nfcGF(p)±(Oii7c3iSt-^C*S^©^^^-*aJ, (ij)(l£i, j^n), 
b i k(l^k^n) feAiJ £ L, 1&ffi#g5£©#«: ffl#* S3tSt*3S^;#«|«*i: £ 

JE(Dmmn£GF(p) ±(Dnn,mxL-^m^:(DJi^ * - * a 1 (ij)(l£i, j^n), 

b i k(i^k^n) *Aj3hL. mttu&.<DM* m^-r ^^^m^mmmt & 

[ff#3U 0] ^*^A.e>*ife^lS#GF(p)<ojte^:#GF(q)(q=pTn)S:frM't 
* HI # ^> :* -r A T* & -o T , 

1 1 ] ^#>#* ^tlfe^PS#:GF(p)(Z)|fe^flsGF(q) (q=p T n) fcflJM-f 

m*fa±<Dm^mm£.. 

GF(q)(7)7CX$:A^7il x0GF(q)±©a»^&ffi*^*5fi7caiifSlia^S:«^, 
2] 5 t «>^e)tlfc^lS#GF(p)©|£^:«:GF(q)(q=pTn)S:fiJffl < r 

GF(q)©5tx&A^h u *(DGF(q)±(D&fGzmtj?&mnW.wmm£zmz., 
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[0 0 0 1] 
[0 0 0 2] 

o w^XliNeal Koblitz,"A Course in Number theory and Cryptography" .Spring 
er-Verlag,1987lc#L<£B^*iTV>£ 0 =fW P3 ®M±<DMWlftMfflmZ:&sTlZft 

[0 0 0 3] 

E&^PS^GF(q)(q= P Tn, p:^)±^^$ *l£«PJlM £ U E©^*^^ 
&ii$fcT*#J*l 6 5t;G& h £-f£(pT n&p©nij|£^-r) 0 3<Z>h£, E 

Y=x*G 

£&S^I&x##&^£&>btfx&:£#>J:, t P^jST'&S r T% x*G&G£ 
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5. &*fttcoVNT&, IW*ifiW. ifc#W3fc, "SJfWT, S/y-X/ffrWft^ 
©»^, SHEW, 1997, 26-28^- ^Ci¥L<^<b*lT^3o 
[0 0 0 4] 

m&m i ) 

[0 0 0 5] 
[0 0 0 6] 

3.— !fA310, lfSir>^320^^rL--y f B330«, *y hV-W&tfi'&tlX^ 
[0 0 0 7] 

pfcHtfL q=pTn, ^|g#GF(q)±<Z>flmiimfcEi:'rs B EO^-XtfU > b £ 
r * G=0 

[0 0 0 8] 
(l)«3lz>*320K: J:S^|»«©£*fc 

<g3S-fe>#320&, ^&M^£ftTVA£rL-ifA310tf>Mg|x| A£ffllAT, #C 
n-1fA310©43iBHttS:^i-«(^T-y^'Sl~S2) o 
[0 0 0 9] 
Y J. A=x i A * G 

-£<Z)#L <f3S-fc>#320te, ^PS#:GF(q), ffi RffiiK&tf^-^-f > NGSrS/ 
It^ib, fifi(Z):i-1fB33O{C:x--!fA31O©<k|f{§0|Yl A£<& 
^"tSU^y ^S3~S4) 0 
[0 0 10] 
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(2 ) =L - if A3 1 0 iZ j: £ m %x £ f£ 
a-ifA310te, SLRk&^-r-SU^y^SB). 

[0011] 
&{C, 3.— ifA310tt, 
Rll=(rlx, rJ,y)=k*G 

sXk=m+r 1 xXx i A mod r 

s$:ffl[-rs(x^^yS7) 0 nt% mtt, n-1f A310^n-if B330/\^>® 

[0 0 12] 

$P>(C, H-ifA310tt, #e>tlfe(Rll, s)£Jg£,£ LT* y "fe-^mi: £:fcfC 
, rL-4fB330^^M-r<5(^^-y yS8) 0 
[0013] 

(3) a. - if B3301C j: -5 ^£$I§E 
a.-ifB33(H£, 

s * R 1 l=m * G+r i x * Y 1 A 

tfi&ft -r s & z o tsrhicj:';, mmm v & & n - if A3i o<d #tc & stis 

1"S(x5^y :7S9) 0 

s*Rl 1= [((m+r 1 xX x I A)/k) Xk] *G 
= (m+r 1 xXx J, A) * G 
=m* G+(r J, xXx J, A) * G 
=m* G+r i x * Y 1 A 

[0014] 
[0015] 
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Miyaji, Ono, and Cohen, 

"Efficient elliptic curve exponentiation", 
Advances in cryptology-proceedings of ICICS'97, 

Lecture notes in computer science, 1997, Spr inger-ver lag, 282-290. 
[0 0 16] 
y T 2=x T 3+aXx+b 

(xi 1, y i l)-» (xi 1, yl 1, 1) 
(X, Y, Z)^ (X/Z, Y/Z) 

[0 0 17] 

[0018] 

[0019] 
(^2) 

WTt% fi!*©fi£^<*GF(q)(q=pTn, p: |ft£fc) tf)^^IJ§UC O III 7 £Jg 
TifltS. r^T% ffi#©fc«)JS^:#GF(q)©^#^S:f(g)=gTn-j8 
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„ ^JE*#^©*& a £"f£ a A;fr£&3GF(q)tf>*;£:x=xi 0+x i IX a+...+xi 
(n-l)X a T (n-l)iltS, 
[0 0 2 0] 
stepl:#5g5££j&aS401 

x^<bJ^Ttf)yi KO^i^n-DCKtsa^I^^^tS. 
[0 0 2 1] 

xiOXyiO+/3 Xxi (n-1) Xy J, 1+0 Xxi (n-2) Xy i 2+... + /3XxilXyi (n-1 
)=1 

xJ,lXylO+xiOXyi.l+/3 Xxi (n-1) Xy i 2+. . . + /3 Xxi 2Xy i (n-l)=0 
xi2XyiO+xJ.lXyil+xiOXyi2+... + /3Xxi3Xyi (n-l)=0 

xj. (n-1) Xy i O+xi (n-2) X y | 1+x i (n-3) X y J, 2+...+xi OXy i (n-l)=0 
ste P 2:^^^ftWg|5402 

^e^fiRaP401-e^Lfe*S^;©»yik(0^k^n-i)S:#«)--B o 

[0 0 2 2] 
step3:i^5ti^m§15403 

*SStf»aJ402T?#«)fe»ylk(0^k^n-l)S:3SS7Cl=yiO+yl IX a+...+yi ( 
n-l)X a T (n-1) 

[0 0 2 3] 
±IH©Ii:x(CoVAT, 
xX 1=1 mod f (g) 

xXl=xi OX (yi O+yi IX a+...+yi (n-l)X a T (n-1)) 

+xl IX a X (y i O+yi IX a+...+yi (n-1) X a T (n-1)) 
+xJ.2X a T 2X (yi O+yi IX ct+...+yi (n-1) X a T (n-1)) 

+xi (n-1) X a T (n-1) X (y i 0+y i 1 X a +. . .+y i (n-1) X a T (n-1)) 

a T n= 0 mod f (g) 
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xXl=xl OX (y 1 O+yi IX a+...+yl (n-1) X a T (n-1)) 
+x| IX (y i OX a +y I IX a T 2+. ..+y I (n-1) X £ ) 
+x i 2X (y 1 OX a T 2+y J, IX a T 3+. ..+y J. (n-1) X a X 0 ) 

+xl (n-l)x(ylOX a T (n-l)+yl IX /S+...+yi (n-1) X a T (n-2) /3 ) 

xx I=xi OXy 1 0+ /S Xx J. (n-1) Xy i 1+. . . + Xx| IX y J. (n-1) 
+ aX(xilXyJ.O+xJ,OXy4,l+... + )3Xx4.2XyJ. (n-1)) 
+ a T 2X (xj. 2Xy 1 0+x J, lXyJ. 1+... + /3 XxJ,3Xyi (n-1)) 

+ a T (n-l)X (xj. (n-l)Xyi 0+x i (n-2) X y 1 1+. . .+x l.OXy I (n-1)) 

«5£##<£i:#T?£*. Ucidm, f£^GF(q)<053!7cS:*«>*i4:tt, £ 

[0 0 2 4] 

[0 0 2 5] 

JKT-e, ^3fe©3H«ftGF(p)J:(OjfiS£*g^©jWeSJC-ov%TH8 £Mv\TiB0J! 

#*jai, 1985, 76-82^- S/'lC# b < £*lT V^ 0 
[0 0 2 6] 

a 1 (11) Xx | 1+aJ. (12) Xx J, 2+. ..+al (In) Xx J. n=b 1 1 
a 1 (21) X x 1 l+a 1 (22) X x 4. 2+. . . +a J, (2n) X x J, n=b i 2 



1 0 
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a i (nl) X x | 1+a J, (n2) X x i 2+. . .+a i, (nn) X x i n=b J. n 

[0 0 2 7] 
stepl:|| 1 2f3g^a&iaS501 
?T#JM, h;i/z, v£^T<Z) 

[0 0 2 8] 

ste P 2 : m 2 ^g^^^g|J502 

[0 0 2 9] 
Step3:#*g5*;3fcfl?gp503 

[0 0 3 0] 

±mm<Dmilimxmm$5ouz&^x, h;i/X& 

M • X=v 

z.(D^^\z^n^±^<D^om7nxm^^>^zm.^hx^^z.}L\zt£^ > 

o 

[0 0 3 1 ] 

±mjcM*^mLx^t~rdgt^\ Mftf&frzuz?z>t=.#>, mmtto&rtWin 
tfm£mwm/2XTix(n-i)m i &mzf£z> 0 ^om. ^n<Dy^.n^o\z-r^>r=. 
mz, mmfo&mn-tfi/sxnx (n-i)x (n+i)m&miz&z> 0 mmibomw.. *£jg 

Mui, mvtt^n^. H2^^msP502©ft^* 
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l/6XnX (2Xn T 2+3Xn-5) XMul+nX Inv 
[0 0 3 2] 

$5. r®!tlitt, l/2xnx (n+1) XMul-e$>§ 0 
[0 0 3 3] 

l/3XnX (n T 2+3Xn-l) XMul+nX Inv 
[0 0 3 4] 

[0 0 3 5] 

[0 0 3 6] 

(DMWlnt. GF(p)±<On7cit3i-?}iC*S^:<0^^^-*ai (ij)(l^i, j^n), b 
i k(l^k^n) %A±}£. L> I9IB*S^;<Z>«¥ £ ffi^J^ S^lfifrJ:©^®*^ » o 
T, fSfSBMSC^S^Sr^Jii^l©^^ h;bT?*3^L, ISff Bff^J £ Itf fBH 1 © /< 
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[0 0 3 7] 

m#m2iz&vzmmiz. m^rnKD^mmmit. mmmz^m^mmm^ 

bmt/ZnZllftim&Mftf&ftZmlU mi 2 mlntL, mi?t-^GF(p) 

_htf)i£5E£l i 1 1 ln£-t£> t i i = n i (k*i) m i k mod p (i=l, 2 

v .... n)fct=n|kmlk mod p£ff|f:f-£lilli [ #l8£, «=l/t mod pfctfU^S 

mi&Tximw-^mzi* 1 1 i = uxu i mod P 0=1, 2 n )*$m-t z>%2 

[0 0 3 8] 

m^z\z&vz>mm$.. m&mz&mM^mi*. mmtuc^u 2 n ) 

&S 1 l=m i lXm i 2 mod p, s i 2=s | 1 X m i 3 mod p, s 1 (n-3)=s 1 (n-4) X 

m| (n-2) mod p, t J. n=s I (n-3)XmJ. (n-1) mod p, t i (n-l)=sj, (n-3)Xm|n m 
od p, s| n=m i (n-1) X m i n mod p, t 1 (n-2) =s 1 (n-4) X s i n mod p, s i (n-1) 
=mi (n-2)Xsln mod p % t i (n-3)=sl (n-5)xs| (n-1) mod p, s i (n-2)=mi (n 

-3)Xs|(n-l) mod p, t i (n-4) =s i (n-6) X s 1 (n-2) mod p s!5=mi4X 

s 1 6 mod p, t J, 3=s 1 lXsJ. 5 mod p, s 1 4=m J. 3X s i 5 mod p, tJ,2=mllXsJ, 
4 mod p, tl l=mi2Xs!4 mod pjC J: U ft Jl U t&^&-£*. <b tlfck&JS V>T, 
t=t 1 k x m 1 k{C J: »J ftlf £ Z. £ & £ ? & . 
[0 0 3 9] 

m&rn* iz&tfzmm*. ^^^^ ^ti^^^GF( P )©^^GF(q) ( q = P t n) 

tCfeVNT, GF(q)tf)^x£Ai7i: U x£>GF(q)_t(Dj£^;£m*nr §^7t;M^gT' 
feot, MSajcx^A^i: U BrffBTCxcD^^^^^^fe^©^^'^?:^^^- 
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[0 0 4 0] 

St#£ 5 jcfe^S^Wtt, =*to$X hfrtz.M BB#GF(p)©ffi^:#:GF(q) (q=p T n) 
{Cfc^T, GF(q)©^x$rA^il U x<DGF(q)±©&7B&ffl:ft?'S&7£Mlf^« , T? 

a 

[0 0 4 1] 

m&m 6 iz&ttzmmiz. ^^^^^nt^mi^GFip) ©f&*#GF(q) (q=p r n) 

iCfc^T, GF(q)tf)^x£A;fr£U xtf)GF(q)±<Z)«^£ ^ts^t 

o 

[0 0 4 2] 

m&m 7 ic & w * &m ^» & *i ^ pe#gf ( P ) z mm t z>mm&mm 

Bt^i/^rAT'Sot, %m{fr±<Z>m-%mm£. !E<D»tn£GF(p)i:<Z)n^;ig3£ 
-raW^^-^al (ij)(l^i, j^n), b | k(l^k^n) & AiJ H U MIH 

[0 0 4 3] 

if 8 fCfctt-S^fcL ^&#*e>*ifc^K#:GF(p) SrfM-rs^Rfrfrjffl 
Bf-^i/^^AT'feoT, ^Rg#£_tcDHif#§£«i:, IE<2Sgl5:ni:GF(p)±tf)n5t;jt 
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ft-lkJjmaart^t-Zal (ij)(l^i, j^n), bj.k(l^k^n) %:AiJ £ L, M 
[0 0 4 4] 

»#£9 JcfcttSfgUBtt, ; ?«>#^.&tifc^lS#GF(p)S:3pJM'rs^|S«:3pJM 
If^S/^fAlfiot, ^K#±<©Hff-^(Ktt^, iE©^iS:ni:GF(p)±(Dnn:^3i 
-^*S^©/19jl-*al (ij)(l^i, j^n), bi k(l^k^n)£A2/£ U i&ffi 

[0 0 4 5] 

0&Cfctf3#gBJ!te, J ?«)#^e > nfc^lS#GF(p)©ift^GF(q)(q=pT 
n)$:^Jfflf S^A^flJfflBf#>>X^AT$>oT, t£;*flU:G>lfc-!t$5Sfc, GF(q) 
©Ttx&A^i: U x©GF(q)±<Z)^^:$:m^^^it7cMW^S5:fS^., ffrfBSSTC 

[0 0 4 6] 

m&mi uz&tt&mmiiz. ^«>#^.e>nfc^is#GF(p)©j£^#GF(q)(q=pT 

[0 0 4 7] 

if #511 2JCfi^S»Wtt, ^*#^.e>tl^*|5S#:GF(p)CD^^#:GF(q)(q=pT 
n)$:Mi-^^A^fJfflBt#>>X^AT^oT, ffi*flUl©HIH^Stt*:, GF(q) 

[0 0 4 8] 
(l&fift&JR 1 ) 
-5 = 
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[0 0 4 9] 

&mn£&sT<Dnrt&iL-?kJ3m75;<7)A^*-*zl (ij)(l£i, j£n), bik(l^k 
[0 0 5 0] 

a i (11) Xx i 1+a | (12) Xx i 2+. ..+a | (In) Xx| n=b J, 1 
a 4. (21) Xx J, 1+a i (22) Xx J, 2+. . .+a i (2n) Xx| n=b 4, 2 

a i (nl) Xx i 1+a | (n2) Xx J, 2+. . .+a I (nn) Xx | n=b | n 

^K#±©?RffS«lOtt, »i^e«3ESI»l0ii:, «2 2fS5£3ESIffl$i02i:, 
3£7E?Bli£fflS103*:, ^S«##fi|I104S:«A*. 
[0 0 5 1] 

mi^^m^PlOlli, ntaj (ij)(l£i, j£n), b J, k(l^k^n) ZAilt L 

, -eti&o^S^o^^^-* &JEsTF©ff#IM[i] h;i/v[i] icgg&u ffl* 

[0 0 5 2] 

M[i]=(ai (in zmmmmnmftii^zim) 

H2^@^msi02ii, ®i^S^;3Et!lfiPioi^&ffi*a4xfcff^lM[i] 

h;i/v[l] &?f?«M[l]#H^fc2*lS J:^tCX«IU, £»3ftfcfT#IM[2] h 
[0 0 5 3] 

&5ti£Jf£3P103l£, ^ 2 J$m&M&m02fr *> &±l £ *l fc*T#lM [2] (O^^m 
ik(l^k^n)©GF(p)±©a»7ClikS:tf»L, ffiA^S. 
[0 0 5 4] 

*ms;#«¥»io4tt, ^2^r@^:iEgifflsio2^e,ffi*atifcff^M[2] i:^* h;b 

v[2] i:3ffi7C?R#api03^e>ffi*S*ife3S»7cUk(i^k^n)5:Mv^T, #@5£<Z)8?£: 
[0 0 5 5] 
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m i #®5£3esiasi<>i©te$E) 

[0 0 5 6] 
M[l] • x[l]=v[l] 



[0 0 5 7] 
[0 0 5 8] 

h;i/v[i] ZfifW^ftitZtiZ £e>lc^g|U ^m$ti^^'JM[2] h;i/v[ 

[0 0 5 9] 

^2^^^pi02ij;, ^iTOMig^SI5i02ii:, ^SPi022i:, Sil2ffl§ 

mmmmo23n, ~n^tmo2At.. mimrmmmo25n. H2^t^spio26 

[0 0 6 0] 
[0 0 6 1] 

g^SP 1022&, Hj^J(Z)^<7)tfiT*GF(p)±T*0T*^VN^$:^j^^P>^f* 
[2], v[2]©-en^tl(D^fhmj^$:Atimx.. *T#JMa i, 2), v(j, i, 2) 
[0 0 6 2] 

2 ^KHM|g^g|S1023tt, * V y * i £ j+HCtS^t 6„ 
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.[0 0 6 3] 

= £f-ffcg|51024te. Mi ( j j) (M X (ij)ttff^JM(j, U 2)©if? £M J, (i j) 

£MvnT, j+l^k^iHC*fLT, 
MA (ij)«-0 

Mi (ik)<-Mi (jj)XMi (ik)-Mi (ij)xMi (jk) 
bi i«-M i (jj)XbJ, i-Mi (ij)XbJ, j 

©J^JCKJgU Kj£ffe<Z>*?#[S:M(j, i, 3), h;i/£v(j, K 3) £ U ffi 
[0 0.6 4] 

» 1 »7fffj£api025fci:, i=irc<fc.5;fr£l3£'*&. 
[0 0 6 5] 

0 2«FT J W3eiPlO26tt, j=nT$>^*^J^-r^o 
[0 0 6 6] 

#TtC ^2^©^g|gP102®i&#$:^-r o 
[0 0 6 7] 

miajJ»te&j£asi021W:. j&lfc&JtU «5ft9J1022JCj. «l*g 

^!5SiaiS101*em*3*lfcff?ffM[l]. ^^h;i/v[l]^A*t5. 8!Sjta$1022W:, 

»D«)tl8ILm©lTl^ki:t5 0 £ e>lck*j©«-£-{c, fr^JM [l] , 
h;i/v[l]©-€-4i-?*i©»kff iilgjff &A4xaiA, A*iSIAfc«<Z>ff^l, b Jl 
Z*ft?fr. M(j, i, 2), v(j, i, 2)^U »2*oaB«S5£9J1023iCj&A;&-r 
3. !£2%jmUffi£m023\** i&j+HCgWtU H^|>fbaP1024JCM(j, U 2). v( 
j, i, 2)*Ail~?Z> 0 H#-ffca$1024tt, M(j, i, 2), v(j, i, 2)^iL, 3^91 

tfe©*m M(j, i, 3), v(j, i, 3)fcU Si l *mHl3£8ls 

1025lCi$:A^-r-5o ® 1 J»T J W3tail025tt, i=n"e&£;fr¥!l5t U i=nt$)5i 
H2^T¥[I^SP1026JCj$:A^-r-5 o **lJK^tt, i&i+lKKJtU H^fl; 
BP1024tCM(j, i-1, 3), v(j, i-L 3)£A;W£ 0 & 2 J»T J P9^aP1026tt, j=n 
T?*S*MHH£U j=nT*&-5££, M(j, 3), v(j, i-1, 3)&M[2], v [2] 

LTffl#U «FT. -ttlJSWMi, j&j+UC»£U &3f3|S1022lCj, M(j-1, i-1 
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> 3), v(j-l, i-i, 3)$:A*tSo 

[0 0 6 8] 

[0 0 6 9] 

H^-fbaJ1024©A*S:^JMA (in), K * h ;i/v i (in) £ U ffii? £*T#|M i (ou 
t), hJVvi (out)£.-t& 0 = *Mtasi024tt, fr^JM A (in) <OWu jfr^ff'* 

V Hi, Hj^tS^I, 

Mi (jj)xl i i-Mi (ij)xl i j 

©tH!ES:f?VV £0>*g:Sl0>fT'<* b;i/£Mi (out).O^iff^ U 

Mi (jj)Xbi i-Mi (ij)Xbi j 
0>ff-ff&*TV\ vl (out)CDjRiffi: LTV* 5. ftBCDM J. (out), v i (out) ©J&rSHiM 
i (in), vl (in)h^Ct'*S„ 

Ml (in) • x[l]=vi (in) 

M J. (out) • x[l] =v i (out) 
[0 0 7 0] 

> <H*»I3?, 1985, 76-82^- V 

^-LcfcU, &2#gl££fftm02©#g5£g£&lCj:oT, jBttSEftLfcV*. 
[0 0 7 1] 

= #flsaS1024fc&S jJCfcfbT, j+l^i^n=&^fe-T itC 

»UT, Mi (ij)#0tCfc5. 3 0iff?:j^l^f,nitiiJItfflT% fr#I©T 
Sfcap^tfOJCfc*. LfctfoT, «2^jS^;3ESIffll02tt^S^:(O»S:^l:ai*- 

[0 0 7 2] 
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n-2 0 3 0 5 ? 
[0 0 7 3] 

59?7cSI»api03tt, & 2 *S*IEiftaJ102^ £ ffl# 3 ft fc*T*J©*MlJS#« I k(l 
[0 0 7 4] 

a»7ctR#8Pi03tt, fH»api03ii:, ^l^^?t#SPl032i:, #2$8»7n?B»asi03 
3£fl|x.£ 0 

[0 0 7 5] 
m#SP1031«, 

t J. i = n 4. (k=£ i) m i k mod p (i = l, 2, . . n) 

s i l=m | 1 X m i 2 mod p 
sj, 2=s i lXm J, 3 mod p 



s | (n-3) =s i (n-4) Xm| (n-2) mod p 
t i n=s i (n-3) X m | (n-1) mod p 



ti (n-l)=si (n-3)Xmln mod p 
s i n=m j. (n-1) X m | n mod p, t i (n-2) =s 1 (n-4) X s 1 n mod p 
si (n-l)=ml (n-2) X sj.n mod p, t i (n-3)=sl (n-5)Xs| (n-1) mod p 
si (n-2)=ml (n-3)Xsl (n-1) mod p, 1 1 (n-4)=s| (n-6)Xs| (n-2) mod p 



s 1 5=m 1 4 X s 1 6 mod p, t 4. 3=s 1 1 X s 1 5 mod p 
s 1 4=m | 3 X s i 5 mod p, 1 1 2=m 1 1 X s i 4 mod p 
t|l=mi2Xsi4 mod p 

t=Il Ik m j, k mod p 
£ ^ *b # * »~> *i £ k £ M V > T , 
t=t i kXm i k mod p 
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«r¥-l 1 -2 0 3 0 5 



[0 0 7 6] 



*15S»7C?RilCBP1032tt, 



u=l/t mod p 



[0 0 7 7] 



^2^5tilI»S[51033tt, 



I i i=uX t i i mod p 



(i=K 2, 



n) 



[0 0 7 8] 
[0 0 7 9] 

^3¥a$1031li, t| i = n i (k*=i) nik mod p (l^i^n)fc, t=n |k m|k mod 
P&ffDtU 3gl&7t;*gM51032lCt£A;dt-&o S 1 3S»7B?S»9J1032tt, tCDGF 
(p)±.C05^7c5:St#b, -eti&ufcU u, t i i (l£ i^n) 2 j£jt;?illtBI51033lc 
A^fSo H2 3^^miEaiS1033tt, m i i (l£ i £n) ©GF(p)_fc©a*7Gl 1 i SrfU* L 

[0 0 8 0] 

(»7£«*«JiQ3©S&f£©tfc3E) 

HUMP 1 031 T?fc):, 

s J. l=m | 1 X m | 2 mod p 

s | 2=s J, 1 X m i 3=m XlXmi2XmJ,3 mod p 

s i 3=s I 2 X m i 4=m ilXml2XmJ,3Xm|4 mod p 

si (n-3)=m| lXmi2Xm4,3X...XmJ. (n-2) mod p 

tin=s| (n-3)Xmi (n-l)=mi lXmi2Xm|3X...Xml (n-l) = n i (k^fcn) m i 



k mod p 



[0 0 8 1] 
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t 1 (n-l)=s i (n-3) Xml n=m llXml2Xml3X...Xml (n-2) Xm J, n=n 1 (k^ 
n-1) m J, k mod p 

T% U (n-l)£ff|fEU 

s 1 n=m 1 (n-1) Xm 1 n= mod p 

t i (n-2) =s 1 (n-4) Xs|n=m| lXmi2Xm|3X...Xmi (n-3) X m 1 (n-1) X m 1 
n=n 4, (kgi=n-2) m i k mod p 
T% tl (n-2)£ff|f-r3 0 
[0 0 8 2] 

tl (n-3)frt>tl22LT*mn't&. 
[0 0 8 3] 

1 1 l=m 1 2XS 1 4=ml 2Xml3X...Xmln=n 1 (k^l) m 1 k mod p 
•e, til?:^, 3tl^"CfC^:«?)fet 1 k(l^k^n)tf)V^*l#'$:^T, 
t=t 1 k X m 1 k mod p 

[0 0 8 4] 

mi^7t:?IlLg|51032T', ttf)^u&:£#>£ . 

[0 0 8 5] 
^2 5S»^ISI»SP1033Tftt, 
u=l/(m 1 lXm 1 2Xml 3X . . . Xm 1 n) mod p 

U, 1 1 i = n 1 (k¥= i) ml k mod p (l^ign)t^5©T% 
1/m 1 i=uX 1 1 i mod p 
W&Vft'DZ.t.ZmmLT* ■ ! i©38*7GU i&#«>S. JJLtJ:*;, -f^TCDmli 
(l^i^n)©5a»5Bl i e>*lS. 
[0 0 8 6] 
(*5S^;#»9J104©*fiR) 

04 *S^:#»asi04©*iRS:^'r^ , ny ^H-e**. 

[0 0 8 7] 
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v[2] i:a*7c?jijiflBsio3^e>ttj*stifc3a?7ci i i(i^iSn)&/av*T, -zniZ&Mz 

[0 0 8 8] 

*@«:#*«isi04tt, *jJB«K^aui04ii:, #»api042i:, j»T J W^»i043S: 

[0 0 8 9] 

*JJBffig8^api041tt, A^^^c&nlC^tS, 
[0 0 9 0] 

#»aP1042tt, yic Sr^CDi^JCtfUC-rS. 
[0 0 9 1] 

yIc=IIcxb|c-S|(c+lgi^n) (Mi(ci)xyii) 

^rt, Mi(ij)tt, fT^UM [2] ©HiffUj^J^T'feU, bii^^h;w[2] 
[0 0 9 2] 

*T*!Jj£»1043tt, c=0T*S><5^^1"-5o 

[0 0 9 3] 
JetTJC^S^»fiP104<JD»^S^"r. 

[0 0 9 4] 

&W*3*lfeM[2], v[2] fc5S£7C?a3¥SP103*v&ffi^7 3*lfeI i cSrA^J-tS. 
SIS1042&, yic£;£#), *SF7 J Wj£asi043{Cc&A27 , *-«. «FT J R^a$1043tt, c=0 

fcc+nc^U #»«P1042JCM[2], v [2] , Ilc&A*tS. 
[0 0 9 5] 
(*S^#»«P104CD«IiE) 

M[2] • x[l]=v[2] 
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Ml (ll)Xxil+fU (12)XxJ, 2+M J, (13)Xxi3+...+Ml (In) Xx I n=b i 1 
Mi (22)Xxl2+MJ. (23)Xxl3+...+Mi (2n) X x I n=b J. 2 



te, 

yln=IinXbJ,n mod p 
T*&U, xi (n-l)tf)8?yi (n-l)&, 

yi (n-l) = I 1 (n-l)Xbi (n-l)-Mj. (n-1, n)XyXn 
T-&£„ llf^iCLT, x J, ctf)^y J. c& % 

y J. c=I J. cxbj, c-Z i (c+l^i^n) (Mi(ci)Xyii) 

[0 0 9 6] 
[0 0 9 7] 
[0 0 9 8] 

<Z)*i-£\ ft^4&l/3XnX(nT2+3Xn-l)XMul+nXInv-e&£ 0 #MffiJ&Wi 1 T? 
tt, H*HfcaS102©fff-||t4j&<, 2/3XnX(n-l)X(n+l)XMulT*& l J, a£7tSIJMfP<Z> 
tfHt** < (4Xn-5) XMul + Inv, #3S^;£M5104©ff-^*#l/2 X n X (n+l)XMul-£ 
&£©T% ^5t;?IB^filO^#:cOftlE*«, (2/3 Xn T 3+1/2 Xn T 2+23/6 Xn-5) 
XMul+InvT'&£c n=5. | q| =160( hlteq© bf y h +>-f X) 0^§-£\ — jKGfl&ff-* 
t»T?tt, Inv=40MulT*&£3£;W£;ftTV^tf>-e. tf-|IS#, 265XMu 

n?&»j, *^J6^JKi7?tt, i50xmuit'^>s o Lfc^ot, 5ifi^ss:#»^ 



M i (nn) Xx J, n=b i n 
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P 



[0 0 9 9] 

(§g«m2) 

[0 10 0] 

£©a»7B«#8«fc):, ^«?)#^e 3 tlfe^|5S#:GF(p)©fi£^#:GF(q)(q=pTn)lC^ 
VNT> GF(q)<7)7CX$:Ai;i: U xtf)GF(q)± I £ gTTtt, 

ttGF(q) ©£f&#S5£ £ g T n- ,8 £ U x=x 1 0+x 1 1 X a +. . .+x I (n- 

1) X a T (n-D£irZ> 0 
[0101] 

m7tmnmm2oit. xmmnf&zmit., ^m^tmm202t. mimmmos 

£ -Six. £«, 

[0 10 2] 

[0103] 

xiOXylO+/SXxl (n-l)Xyj. 1+/3 XxJ. (n-2) Xy J, 2+. . . + j8 XxJ, 1 X y J. (n-1 
) = 1 

xllXylO+xiOXyi 1+/S Xx j. (n-1) Xyi 2+... + j3 Xxl2Xyl (n-l)=0 
xi.2XyiO+xllXyil+xlOXyl2+... + ^Xxi3Xyl (n-l)=0 

* • • 

xl (n-l)Xyl 0+xl (n-2) X y 1 1+x i (n-3) X y J, 2+...+xi OXyi (n-l)=0 
[0104] 

^7C^g|S203l±, *S^tf-»3P202^&as*Snfe*yik(l^k^n)S:3S&7cnc 
[0 10 5] 
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I=y 1 0+y i IX a+.. .+y 1 (n-1) X a T (n-1) 
[0 10 6] 

6^©>*9*-*&;ffg^fff|j^202JCA:& , r.5. *S^ff»«S202J±, 

»&#ifb, *©»&5a»7ciEiji9J203tcAij , ts. a»7BiESi«P203tt, -jsn^m^ 

[0 10 7] 
(HJfi^JB 2 ©tftlE) 

2 © I xtc o V % T , 
XX 1=1 mod f(g) 

xX I=x i. OX (y | 0+y I IX os+...+yJ, (n-1) X a T (n-1)) 

+x| IX a X (yi 0+y 1 IX a+...+yi (n-1) X a T (n-1)) 
+xi 2X a T 2X (y i 0+y i IX a +. . .+y i, (n-1) X a T (n-1)) 

+x| (n-1) X a T (n-1) X (y 1 0+y i 1 X a +. . .+y I (n-1) X a T (n-1)) 

a T n=)S mod f (g) 

xX I=x| OX (y J, 0+y 1 IX a+.. .+y 1 (n-1) X a T (n-1)) 
+xi IX (y i. OX a+y J, IX a T2+...+yl (n-1) X 0 ) 
+x J, 2X (y i OX a T 2+y i 1 X a T 3+. ..+y i (n-1) XoXjS) 

+xi (n-l)x(yiOX a T (n-l)+yi IX 0+...+yi (n-1) X a T (n-2) /S ) 

xxi=x | OXyJ, 0+/3 Xx| (n-1) Xy| 1+... + /8 Xx J, lXy 1 (n-1) 
+ aX(x|lXyi0+xJ.0Xyil+... + /3Xxi2Xyl (n-1)) 
+ aT2X(x4.2XyiO+xilXy|l+... + /3XxJ.3Xyi, (n-1)) 
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+ a T (n-1) X (x J. (n-1) Xy i 0+x J, (n-2) Xy J. 1+. . .+xl OXy 1 (n-1)) 

±©5®3i^@^; 5:^ < r i: i: ^ b v\ 0 

[0 10 8] 

[0109] 
(HJ6^J»2©»*) 

[0 110] 

[0 111] 

[OT©ffi#^a»^] 
[01] 

[02] 
[03] 
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[04] 
[05] 
[06] 
[07] 
[0 8] 

[##©m^] 

i o ^«®njg^«t i <z>mmft±<DmMmm 
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1 




m i 
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m i *j*B#«£a$ 
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mmm. 


1 


0 


2 


3 




1 


0 


2 


4 




1 


0 


2 


5 


« 1 


1 


0 


2 


6 




1 


0 


3 






1 


0 


3 


1 




1 


0 


3 


2 




1 


0 


3 


3 




1 


0 


4 






1 


0 


4 


1 




1 


0 


4 


2 




1 


0 


4 


3 


mm fern 



2 8 



ffiSE4$ 2000-3049520 



#5p i 1-20305 



[Hi]. 



mm 



m i #«aaa«s 











101 



102 



103 



104 



10 



ffi|iE# 2000-3049520 



#5p i 1-20305 



[02] 



m i wMmmfc® 



1021 



1022 



m 2 mmmwefeu 



1023 



1024 



^ 1 ^TW^ 

1 



1025 



^ 2 ^T^J^ 



1026 



102 
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CH3 J 



1031 



m i mytmn^ 



1032 



m 2 mmnm 



1033 



103 
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[H4] 



104 



1041 



1042 



1043 



4 
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[05] 



20 



201 



202 



203 
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P 



[06] 



301 



302 



303 




S6 



Ri , r y )=k*G 



I 



S7 



s X k=m+r x X j^mod 1 



►S8 



m, Ri , 



S9 



s*I^ =m * G+r x *\ 
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[H7] 



40 



401 



402 







EM 


^ 403 
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IM8] 
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501 



50 




502 







503 
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mm] 

K#ji©«d¥is«T?*)oT, .mttm.7£*47mt.'<9 hfrT-mm-tzmi^n^ 

©GF(p)_t©5S»7C&#«>sa»7C?i[IStaS4:, = ^m&t>*^? h;i/£, trrfB&T&S: 
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